Probably as a separate patch or ticket: we can add "download" button
which would offer the certificate in form of data uri[1] with
'download' attribute of 'a' element [2]. So user will get pem encoded
file without any hassle.